Vulnerability in Open Solution Quick.cart
CVE-2005-1588
SQL injection vulnerability in index.php for Quick.cart 0.3.0 allows remote attackers to execute arbitrary SQL commands via the iCategory parameter. NOTE: the vendor has privately disputed this issue, saying that Quick.cart does not even use SQL and therefore can not be vulnerable to SQL injection
EPSS: 0.012 (65.3th percentile) — read the EPSS interpretation.
Affected products
- Open_solution Quick.cart — versions 0.3
- N/a — versions n/a
References
- cve@mitre.org (Exploit, x_refsource_MISC, Vendor Advisory)
- cve@mitre.org (x_refsource_OSVDB, Exploit, vdb-entry, Vendor Advisory)